Commit Graph

267 Commits

Author SHA1 Message Date
Serge Gautherie
c49b74c744 Bug 441425 - "(some) Security Manager (PKI) files seem to reference <contextHelp.js> uselessly" ((Av1) <content/*.xul>) [r=kaie] 2008-08-20 00:25:25 -05:00
Serge Gautherie
ddc26372f4 Bug 228448 - Remove '=='/'!=' 'PR_FALSE'/'PR_TRUE'
(Dv1a) </security/manager/ssl/src/ns*.cpp>
r=kaie
2008-08-20 00:18:58 -05:00
Serge Gautherie
a19034ed31 Bug 148194 - "Remove session-logout code from security module" ((Av1-19T) <nsNSSComponent.cpp>) [r=kaie] 2008-08-20 00:17:20 -05:00
Kai Engert
12321d9d10 bug 449892, Enable additional EV roots for FF 3.0.2
r=rrelyea
2008-08-20 03:57:23 +02:00
Serge Gautherie
1b5b96dc12 Bug 450187 – "nsNTLMAuthModule.cpp(827) : warning C4390: ';' : empty controlled statement found; is this the intent?"
(Av1) <nsNTLMAuthModule.cpp>
2008-08-12 01:41:37 +02:00
Benjamin Smedberg
86fc9bf82f Bug 445570 - heap autostring in PSM, r=kaie 2008-08-18 12:45:38 -04:00
Dave Townsend
9cb6773784 Backed out changeset cf3eae029913 2008-08-18 15:08:14 +01:00
honzab@allpeers.com
a19d587018 Bug 135007, Transfer mode of images should be relevant for shown lock icon state (mixed content)
Based on ideas from Stuart Parmenter and experimental code from Kai Engert
Patch contributed by Honza Bambas
r=kaie, r=pavlov, sr=bz
2008-08-16 09:12:42 +02:00
Kai Engert
b896a8b0e7 Backed out changeset 3770c42e3118 2008-08-16 08:00:17 +02:00
honzab@allpeers.com
4a11f328e4 Bug 428009, hook up ssltunnel to mochitest
Initial work by Jeff Walden, Patch contributed by Honza Bambas
r=jwalden, r=cbiesinger, r=sayrer, r=ted.mielczarek, r=kaie
2008-08-16 07:38:03 +02:00
Kai Engert
731c45f2b1 Bug 450646, Upgrade Mozilla to NSS 3.12.1 release candidate 1
r=rrelyea
2008-08-15 06:12:54 +02:00
Kai Engert
ea6862a090 Bug 443284, crash on login to ActivIdentity/ActivClient smartcard using acpkcs211.dll
Patches contributed by timeless and Dani Church
r=kaie, r=rrelyea
2008-08-14 18:42:40 +02:00
Dão Gottwald
ada882f322 Backed out changeset abfdc2e8da35 2008-08-14 14:10:48 +02:00
Mike Hommey
5c17251436 Bug 330628 – coreconf/Linux.mk should _not_ default to x86 but result in an error if host is not recognized. r=relyea 2008-08-14 12:46:08 +02:00
Kai Engert
d39c2d2778 Bug 307319 - Certificate details show incorrect public key information
r=rrelyea
2008-07-17 13:14:54 -04:00
Marco Perez
e6f7606576 Bug 436806 - "binary format check during build is broken in FreeBSD 7" (unbreak binary format check on freebsd7 and newer) [r=ted/luser r=wtc] 2008-07-12 05:14:47 -05:00
Kai Engert
c91389877e Bug 442561, enable Entrust Root Certification Authority for EV
r=rrelyea
2008-07-08 23:27:13 +02:00
Kai Engert
3c85060846 Bug 429794, Lk (trace malloc leaks) test results have become very unstable
r=nelson
2008-07-08 22:42:51 +02:00
Kai Engert
a46e4f3f66 Bug 431819, SSL client auth, repeated prompts for client certificate
r=rrelyea, r=dveditz
2008-06-18 21:36:29 +02:00
Kai Engert
4ca4582de2 Bug 436870, FF3 RC1 loses SSL certificate exceptions
Patch contributed by Honza Bambas
r=kaie
2008-06-18 21:20:16 +02:00
Kai Engert
a6269cffd6 Backout bug 428009 2008-06-18 14:30:29 +02:00
Kai Engert
60cb32844d Bug 428009, hook up ssltunnel to mochitest
Patch contributed by Honza Bambas
r=jwalden, r=kaie
2008-06-18 11:44:19 +02:00
Kai Engert
521a51d53f Bug 426830, remove unused nick_template_with_num
r=rrelyea
2008-06-11 20:20:24 +02:00
Benjamin Smedberg
e0d84f35cb Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
Justin Dolske
96daf7a083 Revert accidental checkin to NSS. 2008-06-29 17:10:28 -07:00
Justin Dolske
d7219011dd Bug 438394 – land workaround patch for unkillable hangs when loading VerifiedDownloadPlugin.plugin on trunk. r=josh 2008-06-29 17:05:48 -07:00
Kai Engert
d929cd8588 Bug 426555, nsClientAuthRememberService must be refcounted and implement nsISupportsWeakReference
r+sr=mrbkap
2008-06-27 16:28:08 +02:00
reed@reedloden.com
8443fe7800 Bug 433025 - "Still using windows icon in Security Exception dialog" [p=reed r=kaie a1.9=schrep] 2008-05-09 20:43:45 -07:00
kaie@kuix.de
c0caa44ac4 Bug 431384, Enable Network Solutions Certificate Authority for EV r=rrelyea, a1.9=beltzner 2008-05-03 18:36:46 -07:00
johnath@mozilla.com
aad7aadc1b SSL Error page for domain mismatch should hyperlink to correct site (sometimes). b=402210 r=gavin r=kengert r=axel ui-r=beltzner moa/sr=biesi a=beltzner Significant chunks of p=timeless 2008-04-30 13:10:22 -07:00
kaie@kuix.de
c80da42e1f Bug 406954, Unable to add exception for server certificates with empty subject names r=rrelyea, a1.9=shaver 2008-04-23 19:05:37 -07:00
kaie@kuix.de
1035e5cf99 Bug 429110, Random crashing ( [@ PR_AtomicIncrement] ?) ( [@ nsIOService::NewURI] ?) r=rrelyea, a1.9=shaver 2008-04-22 15:46:44 -07:00
gavin@gavinsharp.com
1f832dc92d Bug 413909: nsCertOverrideService IDN handling is broken, and its port handling is also quite cumbersome, patch by Honza Bambas <honzab@allpeers.com>, r=kaie, a=shaver 2008-04-22 13:03:20 -07:00
mnyromyr@tprac.de
5baf049146 Bug 428491: typo in ssl exceptions dialog; p=Serge Gautherie <sgautherie.bz@free.fr>, r=kaie, a1.9=dsicore 2008-04-20 11:14:30 -07:00
dtownsend@oxymoronical.com
b8b7964a79 Bug 429133: Parts of NSS are not in the SDK. r=bsmedberg, a=damons 2008-04-19 03:37:41 -07:00
kaie@kuix.de
f5086a376e Single patch for 3 overlapping fixes. Bug 420187, hang in nsNSSHttpRequestSession::internal_send_receive_attempt r=rrelyea Bug 383369, fixing a regression from 335801 r=rrelyea Bug 358438, fix proposed by and portions contributed by Honza Bambas r=honzab, r=rrelyea approval1.9 for combined patch = beltzner 2008-04-11 21:47:22 -07:00
kaie@kuix.de
8e1be3a7dd Bug 423002, Incorrect error message with certificates which contain subjectAltName r=rrelyea, a1.9=beltzner 2008-04-10 18:28:09 -07:00
kaie@kuix.de
913a248f1e Bug 428415, Don't pass uninitialized values to NSS CERT_PKIXVerifyCert r=rrelyea, a1.9=dsicore 2008-04-10 18:26:19 -07:00
kaie@kuix.de
97456384a2 Bug 327181, follow up checkin to fix IDL comment r=rrelyea, approval1.9=beltzner 2008-04-08 22:25:44 -07:00
kaie@kuix.de
f9e142e884 Bug 406755, EV certs not recognized as EV with some cross-certification scenarios second landing attempt, earlier EV verification, patch 9 r=rrelyea also landing a regression fix, which applies to debug mode compilation code, only r=rrelyea blocking1.9=dsicore 2008-04-08 18:48:02 -07:00
kaie@kuix.de
ed10ad9a44 Bug 425518, Enable multiple roots for EV (and remove 1): Geotrust, Thawte, Verisign, Trustwave, Comodo r=rrelyea, r=nelson, blocking1.9=dsicore 2008-04-08 17:28:48 -07:00
kaie@kuix.de
37eb9c3367 Backing out the "early ev verification" patch from bug 406755, as an attempt to fix a tinderbox test failure (crash). 2008-04-07 19:22:26 -07:00
kaie@kuix.de
17b2f73120 Bug 406755, EV certs not recognized as EV with some cross-certification scenarios Additional patch for Earlier EV verification, v8 r=wtc, r=nelson, blocking1.9=dsicore 2008-04-07 17:10:41 -07:00
johnath@mozilla.com
6271295a50 More verbose logging of harmless-but-scary-looking exception. b=408697 r=kai a=damon 2008-04-07 13:46:50 -07:00
kaie@kuix.de
a608dfde44 Bug 427081, Allow to override SEC_ERROR_INADEQUATE_KEY_USAGE r=nelson, a1.9=dsicore 2008-04-04 17:02:31 -07:00
reed@reedloden.com
9c779794b7 Bug 426822 - "nick_template needs a localization note" [p=valastiak@mozilla.sk (Vlado Valastiak [wladow]) r=kaie a1.9=beltzner] 2008-04-04 02:11:41 -07:00
kaie@kuix.de
212d02e40b Bug 420246, gBrowser.securityUI doesn't clear invalid cert data after using back button r=rrelyea, r=johnath, sr=gavin, blocking1.9=beltzner 2008-04-01 23:36:16 -07:00
kaie@kuix.de
ffc31711d1 Bug 420187. Backing out all 3 patches from today, because of regressions. a=shaver 2008-03-25 20:06:52 -07:00
kaie@kuix.de
755c32e75f Bug 420187, hang in nsNSSHttpRequestSession::internal_send_receive_attempt Follow up patch to fix leak tinderbox bustage, r=rrelyea 2008-03-25 14:49:35 -07:00
kaie@kuix.de
d9ea85f3b9 Attempt to fix red tinderbox, trivial mismatch between NS_IMETHODIMP and nsresult. Follow up to my fix for bug 420187. 2008-03-25 13:09:18 -07:00
kaie@kuix.de
5e5bffbd65 bug 420187, hang in nsNSSHttpRequestSession::internal_send_receive_attempt r=rrelyea, pending more comments blocking1.9=shaver approval1.9b5=beltzner 2008-03-25 12:34:48 -07:00
reed@reedloden.com
ffb0913b45 Bug 419794 - "work out key API for nsICryptoHMAC" (API use nsIKeyObject + fix nsKeyModule + nsICryptoHMAC usage fix) [p=honzab@allpeers.com (Honza Bambas [mayhemer]) r=rrelyea sr=dveditz a=blocking1.9+] 2008-03-18 12:45:40 -07:00
kaie@kuix.de
e92c6abaf6 Bug 423475, Paypal crashes loading main site r=rrelyea, blocking1.9=beltzner 2008-03-17 11:42:04 -07:00
johnath@mozilla.com
08a8c58978 Show certificate error pages (instead of dialogs) in frames. b=423247, p=kengert, r=rrelyea, r=bzbarsky, a=blocking-1.9 (ted) 2008-03-17 11:13:37 -07:00
kaie@kuix.de
f44acb4d74 Bug 406755, EV certs not recognized as EV with some cross-certification scenarios r=rrelyea, blocking1.9=dsicore 2008-03-16 06:42:32 -07:00
kaie@kuix.de
4a2ac6e90c bug 374336, add knowledge of Extended Validation / EV Certificates to PSM Follow up fix contributed by Neil that fixes allocator mismatch. r=kengert, approval1.9=dsicore 2008-03-14 08:22:50 -07:00
reed@reedloden.com
5e3b4d1415 Bug 418543 - "remove -moz-pre-wrap" [p=taken.spc@gmail.com (KUROSAWA, Takeshi) r+sr=roc a1.9=beltzner] 2008-03-08 01:44:35 -08:00
kaie@kuix.de
e6d6571817 Bug 400085, nsNSSCertificate::hasValidEVOidTag compare DER, not strings Patch contributed by Honza Bambas, r=rrelyea, r=kengert, approval1.9=beltzner 2008-03-06 22:14:33 -08:00
kaie@kuix.de
6eaf163cdf Bug 412456, ###!!! ASSERTION: nsSecureBrowserUIImpl not thread-safe r=rrelyea, blocking1.9=beltzner 2008-03-06 03:21:37 -08:00
gavin@gavinsharp.com
01e48bc351 Bug 419111: unfrozen interfaces listed in SDK_XPIDLSRCS, r=kaie, sr=bzbarsky 2008-03-05 14:08:20 -08:00
reed@reedloden.com
67836dd7e3 Bug 351580 - "Possible null pointer dereferences in |nsCrypto::GenerateCRMFRequest|" (Fixed !NULL checks + GC rooting) [p=honzab@allpeers.com (Honza Bambas [mayhemer]) r=mrbkap a=blocking1.9+] 2008-03-04 03:25:44 -08:00
bent.mozilla@gmail.com
872fe28df5 Bug 419655 - "Refreshing a page leaks an nsGlobalWindow until shutdown". r=peterv, sr=jst, a1.9b4+=schrep. 2008-02-28 18:05:57 -08:00
kaie@kuix.de
1c416620df Bug 418958, Enable Go Daddy root CA certificates for EV use r=rrelyea, a1.9b4=beltzner 2008-02-28 10:00:57 -08:00
dcamp@mozilla.com
44b567a446 Bug 415799: Interface and implementation for HMAC support. p=honzab@allpeers.com (Jan Bambas), r=kaie, r=rrelyea, sr=dveditz, blocking1.9=sayrer 2008-02-26 22:31:13 -08:00
wtc@google.com
c3c311e84b Bug 415033: added a hidden preference (in about:config) for enabling or disabling the TLS session ticket extension. The patch is contributed by Nagendra Modadugu <ngm+mozilla@google.com>. r=wtc,rrelyea,kengert a1.9+=damons Modified Files: netwerk/base/public/security-prefs.js security/manager/ssl/src/nsNSSComponent.cpp 2008-02-26 15:09:39 -08:00
gavin@gavinsharp.com
7f33abb115 Bustage fix from bug 415928, r=ted 2008-02-26 10:30:21 -08:00
ted.mielczarek@gmail.com
9b4bd4025c bug 415928 - fix packaging of CRT with jemalloc - make nspr/nss play along. r=bsmedberg 2008-02-25 12:50:35 -08:00
kaie@kuix.de
af82e17ee3 Bug 416827, Enable Digicert root CA certificate for EV use r=rrelyea, approval1.9=beltzner 2008-02-22 00:54:42 -08:00
kaie@kuix.de
80a24d43b5 Bug 418701, Enable Quo Vadis root CA certificate for EV use r=rrelyea, approval1.9=beltzner 2008-02-22 00:51:59 -08:00
kaie@kuix.de
d8c6f29dcc Bug 416850, Deleting a security exception and then re-adding it causes cert exception to remain valid r=rrelyea, approval1.9=beltzner 2008-02-22 00:50:11 -08:00
kaie@kuix.de
fa2db966c4 Bug 372876, Read from SSL socket leaks memory r=rrelyea, blocking1.9=sayrer 2008-02-21 17:07:16 -08:00
dcamp@mozilla.com
52dfbcb3ee Bug 350873: nsStreamLoader code accessed on secondary thread [ASSERTION: nsStreamLoader not thread-safe]. r=kengert, sr=dveditz, b1.9=sayrer 2008-02-21 17:05:17 -08:00
kaie@kuix.de
4cce4b477d Bug 402574, Identity UI lost when switching between tabs Additional patch v4 to fix false positive EV r=rrelyea, blocking-firefox3=mconnor 2008-02-21 17:04:05 -08:00
jwatt@jwatt.org
0bcadac8f7 Bug 417693. late-l10n. The Add Security Exception dialog text is misleading. r=kengert@redhat.com, a1.9=beltzner@mozilla.com 2008-02-21 09:40:52 -08:00
kaie@kuix.de
6ce364ef47 Bug 415213, uninitialized variables in PSM r=rrelyea, a1.9=dsicore 2008-02-13 08:14:25 -08:00
kaie@kuix.de
156f30d32d Bug 415786, escrow warning dialog is broken r=rrelyea, late-l10=pike, blocking1.9=mtschrep, approval1.9=mtschrep 2008-02-07 06:18:09 -08:00
johnath@mozilla.com
ce9321db68 Add Security Exception dialog is unusable at high dpi. b=413623, r=kengert, blocking1.9=schrep 2008-02-06 10:02:10 -08:00
kaie@kuix.de
2a5945649a Bug 413627, nsCertOverrideService can't register observers (NS_ERROR_UNEXPECTED) intended to fix blocking1.9+ Bug 414808 Patch contributed by Ehsan Akhgari, timeless and some trivial tweaks by myself Thanks to Tomcat for help with testing r=me, a=mtschrep, blocking1.9-on-414808=beltzner 2008-01-31 22:04:56 -08:00
kaie@kuix.de
48937de428 Bug 409091, SSL Client Auth prompt should indicate port number r=rrelyea, a1.9=mtschrep 2008-01-22 15:47:55 -08:00
kaie@kuix.de
aeabf2b45f Bug 405139, EV certs should be treated as providing less certainty of identity if OCSP is disabled. r=rrelyea, a1.9=mtschrep 2008-01-22 15:46:49 -08:00
kaie@kuix.de
a51dd553e9 Bug 412786, uninitialized variable r=rrelyea, a1.9=mtschrep 2008-01-22 15:44:29 -08:00
kaie@kuix.de
66c76f5083 Bug 412455, Regression, EV UI no longer shows up r=rrelyea, a1.9=mtschrep 2008-01-22 15:43:12 -08:00
kaie@kuix.de
6dee00122d Bug 399590, Update Mozilla trunk to use NSS tag NSS_3_12_BETA1 r=rrelyea, a1.9=mtschrep 2008-01-18 02:40:58 -08:00
kaie@kuix.de
8b4324d92b Bug 409280, nsIProtectedAuthThread is not embedding friendly Patch contributed by Christian Persch (GNOME) r=kengert, blocking1.9=mtschrep 2008-01-15 14:41:52 -08:00
kaie@kuix.de
5e3cf887fd Bug 407788, polish Delete Server Certificate Exceptions dialog Patch contributed by Vlado Valastiak r=kengert, a=mtschrep 2008-01-15 13:45:05 -08:00
kaie@kuix.de
be637af89e Bug 407523, Error page should not allow adding an exception for inadequate key usage r=rrelyea, a=mtschrep 2008-01-15 13:41:06 -08:00
benjamin@smedbergs.us
dfc4cee45d Bug 411327 - nsIXPCNativeCallContext should not inherit from nsISupports, r=mrbkap, a=schrep 2008-01-15 07:50:57 -08:00
dtownsend@oxymoronical.com
eef047b68f Bug 404726: Addon compatibility check gives many alerts (toolkit and security portions). r=gavin.sharp, r=kengert 2008-01-15 07:06:34 -08:00
kaie@kuix.de
d2c25c96f2 Bug 408432, Add Exception fails for certs with no DNS names (no CN, no SAN) r=rrelyea, blocking1.9=dsicore 2008-01-14 08:04:00 -08:00
kaie@kuix.de
e277586d41 bug 406999, Enhance EV performance; Never combine EV with Cert Overrides r=rrelyea, blocking1.9=mtschrep 2008-01-14 07:45:07 -08:00
jruderman@hmc.edu
eae9d39258 Add crashtest for keygen 2007-12-16 17:27:11 -08:00
johnath@mozilla.com
a6b4a53d33 Polish delete cert dialog. b=407788 r=kengert a=dsicore 2007-12-14 13:34:06 -08:00
kaie@kuix.de
ee2aa492e9 fixes bug 406290 r=wtc, a=beltzner 2007-12-14 09:39:30 -08:00
kaie@kuix.de
fb49368dc5 Bug 403691, unable to display decoded policies extension in certs from https://www.digicert.com r=kengert, a=beltzner 2007-12-14 08:11:57 -08:00
kaie@kuix.de
18434f216a bug 119500, PKCS#11 CKF_PROTECTED_AUTHENTICATION_PATH token flag not supported Patch contributed by Petr Kostka r=rrelyea, sr=kengert, a=dsicore Addon Patch to provide dummy implementations for gtk-embedding and camino. r=mark, sr=jst 2007-12-04 23:34:55 -08:00
kaie@kuix.de
34143f5ff6 bug 119500, PKCS#11 CKF_PROTECTED_AUTHENTICATION_PATH token flag not supported Patch contributed by Petr Kostka r=rrelyea, sr=kengert, a=dsicore Addon Patch to provide dummy implementations for gtk-embedding and camino. r=mark, sr=jst 2007-12-04 23:31:43 -08:00
kaie@kuix.de
e64d67a61b Bug 378241, Changes from bug 107491 lead to tons of thread-safety asserts r=rrelyea, r=wtc, sr=benjamin, blocking1.9=benjamin 2007-12-04 10:53:14 -08:00
kaie@kuix.de
ca5d681e30 Bug 404059, connection to t-mobile hotspot startup page takes very long Landing workaround patch (shorten timeout) r=rrelyea, blocking1.9=mtschrep 2007-12-03 14:58:06 -08:00
kaie@kuix.de
0b79e16a4b bug 402574, Identity UI lost when switching between tabs r=rrelyea, blocking-ff3=mconnor Also includes merged fix for: Bug 405145, Mixed SSL/non-SSL content reporting inconsistent between standard and EV Certs Patch contributed by Bill Gianopoulos r=kengert, a=dsicore 2007-12-03 14:09:27 -08:00
reed@reedloden.com
3fca62f6a1 Bug 400096 - "In <pippki.properties> (at least), rename "Web Site" to "Server"" ((Bv2a) |importWebSiteCertPrompt| fix) [p=sgautherie.bz@free.fr (Serge Gautherie) r=kaie a1.9=damons] 2007-11-30 23:03:54 -08:00